Re: [tcpm] I-D Action:draft-ietf-tcpm-tcp-auth-opt-11.txt

Dp we absolutely need this document?

L.
________________________________________
From: tcpm-bounces@ietf.org [tcpm-bounces@ietf.org] On Behalf Of Joe Touch [touch@ISI.EDU]
Sent: 23 March 2010 21:21
To: Internet-Drafts@ietf.org
Cc: tcpm@ietf.org; i-d-announce@ietf.org
Subject: Re: [tcpm] I-D Action:draft-ietf-tcpm-tcp-auth-opt-11.txt

Hi, all,

The revisions in this document address the IESG DISCUSS issues.

Joe

Internet-Drafts@ietf.org wrote:
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the TCP Maintenance and Minor Extensions Working Group of the IETF.
>
>
>       Title           : The TCP Authentication Option
>       Author(s)       : J. Touch, et al.
>       Filename        : draft-ietf-tcpm-tcp-auth-opt-11.txt
>       Pages           : 48
>       Date            : 2010-03-23
>
> This document specifies the TCP Authentication Option (TCP-AO), which
> obsoletes the TCP MD5 Signature option of RFC-2385 (TCP MD5). TCP-AO
> specifies the use of stronger Message Authentication Codes (MACs),
> protects against replays even for long-lived TCP connections, and
> provides more details on the association of security with TCP
> connections than TCP MD5. TCP-AO is compatible with either static
> master key tuple (MKT) configuration or an external, out-of-band MKT
> management mechanism; in either case, TCP-AO also protects
> connections when using the same MKT across repeated instances of a
> connection, using traffic keys derived from the MKT, and coordinates
> MKT changes between endpoints. The result is intended to support
> current infrastructure uses of TCP MD5, such as to protect long-lived
> connections (as used, e.g., in BGP and LDP), and to support a larger
> set of MACs with minimal other system and operational changes. TCP-AO
> uses a different option identifier than TCP MD5, even though TCP-AO
> and TCP MD5 are never permitted to be used simultaneously. TCP-AO
> supports IPv6, and is fully compatible with the proposed requirements
> for the replacement of TCP MD5.
>
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-tcpm-tcp-auth-opt-11.txt
>
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>
> Below is the data which will enable a MIME compliant mail reader
> implementation to automatically retrieve the ASCII version of the
> Internet-Draft.
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> tcpm mailing list
> tcpm@ietf.org
> https://www.ietf.org/mailman/listinfo/tcpm